$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer File: g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer (raw, json) Hash identifier: 3OO7mC2UpoxS+nfJVxmqDuLCyMnDhAyA4PkqAo6CxTM= Subject key identifier: 83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: CE87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 03 Apr 2025 08:15:05 +0000 Certificate not after: Fri 03 Apr 2026 08:00:09 +0000 Subordinate resources: IP: 202.38.176.0/23 IP: 202.127.192.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52871 (0xce87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Apr 3 08:15:05 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=835518B3540E89A2C3983213E02FEAAB77BDA544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:89:0f:19:1f:b9:30:f8:9e:96:ca:aa:ed: cd:66:73:50:67:d9:72:58:8d:96:cd:20:0f:4a:46: 70:db:65:fa:00:04:0b:5e:9b:37:ac:c4:f1:b9:fc: fc:36:b4:7d:d9:a1:1f:e4:df:a7:8f:01:c0:7a:a5: 1c:76:ba:2d:c6:84:6d:5b:63:5c:9d:3c:eb:df:59: 7f:41:a6:aa:3f:ef:36:de:0e:33:13:39:30:f8:f1: 19:45:37:8f:f8:63:77:69:fa:0a:1c:e6:0d:39:fb: bc:73:0d:63:9f:8b:2d:70:c5:72:33:8b:0c:27:63: af:46:91:97:5d:cc:ef:8c:ba:d2:53:70:c7:40:9d: a4:ca:16:72:18:00:89:b9:c1:7c:79:04:39:c5:09: 7d:9c:e9:99:84:70:72:d6:17:b8:c1:b7:8b:7c:bf: 3c:e7:c4:b3:98:cd:ed:07:2a:65:d1:32:f2:9f:7f: 8b:9d:66:cf:f1:1a:34:88:92:89:59:b5:db:dd:ed: e6:21:0c:4b:4f:0a:85:e0:f3:fb:58:46:33:2a:fa: 08:1d:5a:96:98:12:64:b8:69:5d:98:1e:e7:14:cb: fc:69:fa:f3:4c:75:e3:6a:cd:0e:19:e6:ea:c5:f5: 17:d8:52:94:1f:f9:9e:71:f0:7c:97:ff:cc:7e:4d: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.38.176.0/23 202.127.192.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:87:c6:4a:1f:85:14:d6:18:70:24:d1:8f:f1:d6:70:3d:e5: ca:2a:53:6a:14:43:53:3e:c9:e1:69:40:ca:ad:f9:94:63:54: aa:1b:c8:c5:36:9d:9c:d8:91:f5:26:b5:e2:dd:10:85:e5:65: a0:64:9c:99:40:6f:bd:06:5a:5f:fd:bb:25:5d:d4:66:33:2b: 28:de:13:b8:3c:d5:fa:34:82:d2:6c:a8:d5:49:ed:68:39:74: a2:3c:b9:f7:d1:f8:6f:61:de:46:84:b2:38:53:dc:d8:90:8e: c2:04:bf:e8:f0:f0:26:1e:7d:40:c1:2b:27:61:55:aa:26:f9: 66:33:a6:1c:ff:bb:15:71:a7:9b:94:f8:b4:26:ab:36:84:1e: 9a:a8:c5:a7:84:42:77:5f:50:46:63:d2:39:6a:f4:38:e3:a6: 38:6c:90:22:39:44:e4:d2:dd:d9:56:de:7b:5f:c9:15:34:65: 90:e2:f4:a3:af:dd:2f:d6:fd:87:f7:60:ee:71:ce:28:95:4e: e2:3b:06:d7:f6:43:bf:42:79:a6:26:7d:ab:99:6c:1e:80:ae: 24:ee:3f:dd:9a:fa:9a:98:86:0b:a0:b9:ac:62:c9:03:a9:10: 40:ad:d8:a3:79:19:c6:a5:87:9f:3e:ca:06:a6:2b:63:c2:71: ae:2e:f6:5f -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAM6HMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA0MDMwODE1MDVaFw0yNjA0MDMwODAwMDlaMDMx MTAvBgNVBAMTKDgzNTUxOEIzNTQwRTg5QTJDMzk4MzIxM0UwMkZFQUFCNzdCREE1 NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUYkPGR+5MPielsqq 7c1mc1Bn2XJYjZbNIA9KRnDbZfoABAtemzesxPG5/Pw2tH3ZoR/k36ePAcB6pRx2 ui3GhG1bY1ydPOvfWX9Bpqo/7zbeDjMTOTD48RlFN4/4Y3dp+goc5g05+7xzDWOf iy1wxXIziwwnY69GkZddzO+MutJTcMdAnaTKFnIYAIm5wXx5BDnFCX2c6ZmEcHLW F7jBt4t8vzznxLOYze0HKmXRMvKff4udZs/xGjSIkolZtdvd7eYhDEtPCoXg8/tY RjMq+ggdWpaYEmS4aV2YHucUy/xp+vNMdeNqzQ4Z5urF9RfYUpQf+Z5x8HyX/8x+ TSFLAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQUg1UYs1QOiaLDmDIT4C/qq3e9pUQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MjkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIyOS9nMVVZczFRT2lhTERtRElUNENfcXEzZTlwVVEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQByiawAwQByn/AMA0GCSqGSIb3 DQEBCwUAA4IBAQBch8ZKH4UU1hhwJNGP8dZwPeXKKlNqFENTPsnhaUDKrfmUY1Sq G8jFNp2c2JH1JrXi3RCF5WWgZJyZQG+9Blpf/bslXdRmMyso3hO4PNX6NILSbKjV Se1oOXSiPLn30fhvYd5GhLI4U9zYkI7CBL/o8PAmHn1AwSsnYVWqJvlmM6Yc/7sV caeblPi0Jqs2hB6aqMWnhEJ3X1BGY9I5avQ446Y4bJAiOUTk0t3ZVt57X8kVNGWQ 4vSjr90v1v2H92Ducc4olU7iOwbX9kO/QnmmJn2rmWwegK4k7j/dmvqamIYLoLms YskDqRBArdijeRnGpYefPsoGpitjwnGuLvZf -----END CERTIFICATE-----Generated at Sat Apr 26 08:13:26 2025 by rpki-client